Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WY4At6EqyhslV4RY-F2UCzb4mVE.roa
File: WY4At6EqyhslV4RY-F2UCzb4mVE.roa (raw, json)
Hash identifier: dacjkbBGV3K+fnjVRmyF0EYxMo7vDLBjsIiNjax00SY=
Subject key identifier: 59:8E:00:B7:A1:2A:CA:1B:25:57:84:58:F8:5D:94:0B:36:F8:99:51
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185F26FBF6EBBC3CDB9D75DC7534D8A55F0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WY4At6EqyhslV4RY-F2UCzb4mVE.roa
Signing time: Fri 27 Jan 2023 08:54:47 +0000
ROA not before: Fri 27 Jan 2023 08:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:6f:bf:6e:bb:c3:cd:b9:d7:5d:c7:53:4d:8a:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 27 08:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598e00b7a12aca1b25578458f85d940b36f89951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:dd:f0:b6:63:52:9b:44:74:97:bd:e4:15:
ff:f6:4d:d1:ff:fd:0e:98:4a:66:1b:8a:a9:bb:17:
7c:23:bf:c4:bd:d2:2a:4d:c2:2d:4d:b5:6e:11:4b:
4e:86:a5:14:69:7d:a7:7d:98:fd:97:eb:a6:d7:cd:
11:35:d0:83:90:61:be:17:5e:4c:7a:50:82:5e:26:
65:11:9b:ae:05:84:a0:d0:d5:72:da:08:50:b6:d3:
d5:b8:56:4a:d0:92:a5:b5:2e:5c:81:77:7d:04:4f:
2f:ac:3b:a8:50:da:f9:1b:2e:af:f1:60:9b:db:92:
67:8c:98:08:3b:4b:f7:e5:5f:ff:98:e7:31:d4:96:
39:99:de:b0:f2:e2:7e:64:2d:4a:dd:e7:97:12:2c:
5d:fb:5e:00:55:12:9a:9d:99:e8:b9:82:a2:23:73:
c5:02:da:4c:b1:b3:3f:0b:f2:ad:7d:8f:7b:73:4a:
9e:3f:fe:e6:64:c7:0b:4f:1c:7a:23:33:2c:b7:74:
f4:22:72:8d:4e:85:1e:34:50:d0:b3:3b:ce:8e:78:
10:c4:7f:e2:a5:e8:c0:46:58:41:6c:e7:8b:80:49:
5c:d7:07:2d:d7:04:09:01:ae:27:ee:fe:b7:59:bd:
67:44:6e:08:94:87:45:a1:51:8f:e9:ee:7d:ba:2f:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:00:B7:A1:2A:CA:1B:25:57:84:58:F8:5D:94:0B:36:F8:99:51
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WY4At6EqyhslV4RY-F2UCzb4mVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.118.0/24
5.105.169.0-5.105.170.255
5.105.185.0/24
5.105.228.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2c:74:ca:a1:11:5a:76:57:51:63:8a:1e:f9:4d:59:0a:99:
38:1e:f9:30:76:b8:ff:fa:e5:6b:d9:f7:37:d9:12:32:f7:95:
38:96:87:6f:b5:6e:08:78:e1:7c:e4:6c:8d:13:34:e1:5b:17:
fe:2d:a9:7e:6f:36:7e:e1:b1:2b:a7:d1:5b:2a:28:08:d3:5c:
f2:80:26:99:cf:4a:bb:91:43:3f:cb:26:aa:26:91:89:9f:c0:
2a:5e:bb:09:27:7e:d0:81:0e:4f:28:4f:a9:15:eb:9c:dc:f0:
25:87:19:6a:fe:b7:e8:00:79:cc:c1:e9:5e:77:37:01:ad:f9:
f9:79:a9:87:a3:0b:4c:6d:d5:f6:cc:43:6a:ff:18:ee:86:fa:
fd:9e:50:7e:44:a7:75:67:22:16:f8:25:d3:d0:5b:7a:1a:df:
6b:7f:77:28:13:61:fd:88:4c:8c:bf:a7:8e:ec:e9:6a:59:4c:
4c:1e:f9:f6:e4:d9:ad:4a:34:dc:91:78:c6:45:78:fc:82:32:
ea:54:9a:53:fa:52:11:c5:59:28:06:3b:0d:12:e6:02:0e:64:
e8:95:1f:4a:d6:5a:02:10:5e:5d:d5:ba:d9:e9:ef:40:8c:e2:
54:52:ae:8f:fc:fd:47:f6:30:8d:24:9e:a5:2a:0d:92:97:ba:
55:92:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org